CTS FOS-3148 Series Скачать руководство пользователя страница 52

Страница: 52 / 201

No command

Switch(config)# no security
storm-protection broadcast

Disable broadcast storm control.

Switch(config)# no security
storm-protection multicast

Disable multicast storm control.

Switch(config)# no security
storm-protection unicast

Disable unicast storm control.

Show command

Switch(config)# show
security storm-protection

Show current storm control settings.

Security command example

Switch(config)# security storm-protection
broadcast 1024k

Set the maximum broadcast packets per
second (pps) to 1024k. Any broadcast
packets exceeding this specified threshold
will then be dropped.

Switch(config)# security storm-protection
multicast 1024k

Set the maximum unknown multicast
packets per second (pps) to 1024k. Any
unknown multicast packets exceeding this
specified threshold will then be dropped.

Switch(config)# security storm-protection
unicast 1024k

Set the maximum unicast packets per
second (pps) to 1024k. Any unicast
packets exceeding the specified threshold
will then be dropped.

2.6.17 SNMP-Server Command

1. Create a SNMP community and set up detailed configurations for this community.

Snmp-server command

Parameter

Description

Switch(config)# snmp-
server

Enable SNMP server function globally.

Switch(config)# snmp-
server community
[community]

[community]

Specify a SNMP community name of up to
20 alphanumeric characters.

Switch(config-community-
NAME)# active

Enable this SNMP community account.

Switch(config-community-
NAME)# description
[Description]

[Description]

Enter the description for this SNMP
community of up to 35 alphanumerical
characters.

Switch(config-community-
NAME)# level [admin | rw |
ro]

[admin | rw |
ro]

Specify the access privilege for this SNMP
account.

admin:

Full access right, including

maintaining user account, system
information, loading factory settings, etc..

rw:

Read & Write access privilege. Partial

access right, unable to modify user
account, system information and load
factory settings.

ro:

Read Only access privilege.

Содержание FOS-3148 Series

Страница 1: ...1 FOS 3148 Series 44 PORTS 100 1000BASE X SFP WITH 4 COMBO PORTS 10 100 1000BASE T 100 1000BASE X SFP UPLINK MANAGEMENT SWITCH Network Management User s Manual Version 0 92...

Страница 2: ...2 Revision History Version F W Date Description 0 90 0 99 15 20141201 Fisrt release 0 91 0 99 16 20141208 Minor modification according to F W v0 99 16 0 92 0 99 16 20150224 Revise trust port...

Страница 3: ...s cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of th...

Страница 4: ...Mode 18 2 4 1 Ping Command 18 2 4 2 Traceroute Command 18 2 5 Privileged Mode 19 2 5 1 Copy cfg Command 19 2 5 2 Firmware Command 20 2 5 3 Ping Command 21 2 5 4 Reload Command 21 2 5 5 Traceroute Com...

Страница 5: ...27 Show running config start up config Command 78 3 SNMP NETWORK MANAGEMENT 79 4 WEB MANAGEMENT 80 4 1 System Information 81 4 2 User Authentication 83 4 2 1 RADIUS Configuration 85 4 3 Network Manag...

Страница 6: ...7 3 Introduction to Q in Q 120 4 4 7 4 802 1Q VLAN 121 4 4 7 4 1 VLAN Interface 121 4 4 7 4 2 Trunk VLAN table 122 4 4 7 4 3 Management VLAN 123 4 4 7 4 4 QinQ VLAN configuration 124 4 4 8 QoS Config...

Страница 7: ...Monitor 157 4 5 6 1 RSTP Bridge Overview 157 4 5 6 2 RSTP Port Status 158 4 5 6 3 RSTP Statistics 158 4 5 7 802 1X Monitor 159 4 5 7 1 802 1X Port Status 160 4 5 7 2 802 1X Statistics 161 4 5 8 IGMP...

Страница 8: ...173 4 6 5 Load Factory Settings Except Network Configuration 173 4 7 Save Configuration 173 4 8 Reset System 174 APPENDIX A Free RADIUS readme 175 APPENDIX B Set Up DHCP Auto Provisioning 176 APPENDI...

Страница 9: ...gement Telnet runs over TCP IP and allows you to establish a management session through the network Once the Managed switch is on the network with proper IP configurations you can use Telnet to login...

Страница 10: ...ased network management system is used to manage the Managed Switch through the network remotely When you use a SNMP based network management system the Managed Switch becomes one of the managed devic...

Страница 11: ...sceiver Before connecting the other switches workstation or Media Converter make sure both side of the SFP transfer are with the same media type for example 1000Base SX to 1000Base SX 1000Bas LX to 10...

Страница 12: ...esses were obtained Remember that an address can be assigned to only one device on a network If you connect to the outside network you must change all the arbitrary IP addresses to comply with those y...

Страница 13: ...the switch cannot be reached by any other means You also need the Local Console Management to setup the Switch network configuration for the first time You can setup the IP address and change the def...

Страница 14: ...thorized username and password and then you will be directed to User mode In CLI management the User mode only provides users with basic functions to operate the Managed Switch If you would like to co...

Страница 15: ...perform several functions The following table summarizes the most frequently used quick keys in CLI Keys Purpose tab Enter an unfinished command and press Tab key to complete the command Press key in...

Страница 16: ...rence parameter s size r repeat t timeout These three parameters are used in ping command and are optional which means that you can ignore these three parameters if they are unnecessary when executing...

Страница 17: ...lete the default username admin to prevent unauthorized accesses Enable Mode Password Enable mode is password protected When you try to enter Enable mode a password prompt will appear to request the u...

Страница 18: ...t packets are sent and received Command Parameter Description Switch ping A B C D A B C D E F G H s size 1 65500 bytes t timeout 1 99 secs A B C D A B C D E F G H Enter the IP IPv6 address that you wo...

Страница 19: ...opy cfg command to backup a configuration file via FTP or TFTP server and restore the Managed Switch back to the defaults or to the defaults but keep IP configurations 1 Restore a configuration file v...

Страница 20: ...witch copy cfg from default keep ip Switch reload 2 5 2 Firmware Command To upgrade firmware via TFTP or FTP server Command Parameter Description Switch firmware upgrade ftp A B C D A B C D E F G H fi...

Страница 21: ...art the Managed Switch Command Example Switch reload 2 To specify the image for the next restart before restarting Command Example Switch reload Image 2 OK Switch reload 2 5 5 Traceroute Command Comma...

Страница 22: ...appear Company Name Display a company name for this Managed Switch Use switch info company name company name command to edit this field System Object ID Display the predefined System OID System Contac...

Страница 23: ...ss Enter in Privileged mode you will be directed to Global Configuration mode where you can set up advanced switching functions such as QoS VLAN and storm control security globally All commands entere...

Страница 24: ...config interface 1 3 5 Switch config if 1 3 5 Enter three discontinuous interfaces separated by commas Interface 1 3 5 will apply commands entered Switch config interface 1 3 Switch config if 1 3 Ent...

Страница 25: ...e M B Version Display the main board version Fiber Type Display information about the slide in or fixed fiber type Fiber Wavelength Display the slide in or fixed fiber s TX and RX wavelength informati...

Страница 26: ...s 192 Use this command to enter ACL configuration mode for each ACL rule When you enter each ACL rule you can further configure detailed settings for this rule Switch config acl RULE action permit cop...

Страница 27: ...ecify destination MAC mask Switch config acl RULE ethertype any 0xWXYZ any 0xWXYZ Specify Ethertype or ANY Switch config acl RULE ingress port any port list any port list Specify ingress port s or ANY...

Страница 28: ...fig acl RULE no destination l4 port Undo destination l4 port specification Switch config acl RULE no destination mac Undo destination mac specification Switch config acl RULE no ingress port Undo ingr...

Страница 29: ...annel group distribution rule destination mac Load balancing depending on destination MAC address Switch config channel group distribution rule source mac Load balancing depending on source MAC addres...

Страница 30: ...255 Specify a key to the selected interfaces Switch config if PORT PORT channel group lacp role active active Specify the selected interfaces to active LACP role No command Switch config if PORT PORT...

Страница 31: ...tion with the authentication server and relays the response to the client Switch config dot1x reauth period 0 3600 0 3600 Specify a period of authentication time that a client authenticates with the a...

Страница 32: ...rt_list port_list Show or verify the selected interfaces 802 1x settings including port status and authentication status Switch config show dot1x statistics Show or verify 802 1x statistics Switch con...

Страница 33: ...RT PORT dot1x reauthenticate Re authenticate the selected interfaces No command Switch config interface port_list port_list Enter several discontinuous port numbers separated by commas or a range of p...

Страница 34: ...w command Switch config show ip address Show the current IP configurations or verify the configured IP settings IP command example Switch config ip address 192 168 1 198 255 255 255 0 192 168 1 254 Se...

Страница 35: ...the specified ports DHCP Snooping Option 82 and trust port settings Switch config show ip dhcp snooping status Show DHCP Snooping status IP DHCP Snooping example Switch config ip dhcp snooping Enable...

Страница 36: ...ming video and gaming and allows more efficient use of resources when supporting these uses IGMP Snooping is the process of listening to IGMP traffic IGMP snooping as implied by the name is a feature...

Страница 37: ...ooping function Switch config no ip igmp snooping flooding Disable flooding function Traffic will forward to router ports only when disabled Switch config no ip igmp snooping immediate leave Disable i...

Страница 38: ...multicast segment information Switch config show ip igmp segment 1 400 1 400 Show the specified segment s setting Switch config segment ID show Show the selected segment s setting Switch config profil...

Страница 39: ...port_list Enter several discontinuous port numbers separated by commas or a range of ports with a hyphen For example 1 3 or 2 4 Switch config if PORT PORT no ip igmp filter Disable IGMP Filter on the...

Страница 40: ...er on port 1 to port 3 Switch config if 1 3 ip igmp filter profile Silverprofile Assign the selected ports to the specified profile Silverprofile Switch config if 1 3 ip igmp max groups 400 Set the ma...

Страница 41: ...nerate IP addresses internally using stateless address autoconfiguration or they may be assigned configuration data with DHCPv6 Set up the IPv6 address of the Managed Switch or configure the Managed S...

Страница 42: ...on the network By using LLDP two devices running different network layer protocols can learn information about each other A set of attributes are used to discover neighbor devices These attributes con...

Страница 43: ...ault setting Switch config no lldp tlv select capability Disable Capability attribute to be sent Switch config no lldp tlv select management address Disable Management Address attribute to be sent Swi...

Страница 44: ...Switch config loop detection interval 1 180 0 180 Set up Loop Detection time interval from 1 to 180 seconds Switch config loop detection unlock interval 1 1440 1 1440 Set up Loop Detection unlock time...

Страница 45: ...aging time Entries in the MAC address table containing source MAC addresses and their associated ports will be deleted if they are not accessed within aging time MAC Command Parameter Description Swit...

Страница 46: ...nfig if PORT PORT no mac learning Disable MAC learning function Show command Switch config show mac address table Show MAC addresses learned by the Managed Switch Switch config show mac address table...

Страница 47: ...rt number Management command example Switch config management console timeout 300 The console management will timeout logout automatically when it is inactive for 300 seconds Switch config management...

Страница 48: ...itch config ntp server2 A B C D A B C D E F G H A B C D A B C D E F G H Specify the secondary time server IP IPv6 address Switch config ntp syn interval 1 8 1 8 Specify the interval time to synchroniz...

Страница 49: ...ameter Description Switch config qos 802 1p dscp 802 1p dscp Specify QoS mode Switch config qos dscp map 0 63 0 7 0 63 Specify a DSCP value 0 7 Specify a queue value Switch config qos management prior...

Страница 50: ...discontinuous port numbers separated by commas or a range of ports with a hyphen For example 1 3 or 2 4 Switch config if PORT PORT qos rate limit ingress 500 1000000 kbps 500 1000000 kbps Specify ingr...

Страница 51: ...rotection multicast 1 1024k 1 1024k Specify the maximum unknown multicast packets per second pps Any unknown multicast packets exceeding the specified threshold will then be dropped The packet rates t...

Страница 52: ...ximum unicast packets per second pps to 1024k Any unicast packets exceeding the specified threshold will then be dropped 2 6 17 SNMP Server Command 1 Create a SNMP community and set up detailed config...

Страница 53: ...nd Switch config community NAME exit Return to Global Configuration mode Snmp server example Switch config snmp server community mycomm Create a new community mycomm and edit the details of this commu...

Страница 54: ...tch config trap 1 community mycomm Refer this trap destination account to the community mycomm Switch config trap 1 description redepttrapdest Add a description for this trap destination account Switc...

Страница 55: ...leaving a single active path between any two network nodes Multiple active paths between network nodes cause a bridge loop Bridge loops create several problems First the MAC address table used by the...

Страница 56: ..._false auto forced_true forced_false auto Set the aggregated ports to non point to point ports forced_false or allow the Managed Switch to detect point to point status automatically auto By default ag...

Страница 57: ...ace s STP information including port state path cost priority edge port state and p2p port state Switch config show spanning tree interface port_list port_list Show the selected interfaces STP informa...

Страница 58: ...g Tree settings Spanning tree Interface command Parameter Description Switch config interface port_list port_list Enter several discontinuous port numbers separated by commas or a range of ports with...

Страница 59: ...state Switch config show spanning tree statistics Show each interface and each link aggregation group s statistics information including the total RSTP packets received RSTP packets transmitted STP p...

Страница 60: ...1518 9600 bytes Specify the maximum transmission unit in bytes The allowable MTU value is between 1518 and 9600 bytes No command Switch config no switch bpdu 00 0F Undo permit packets from the address...

Страница 61: ...ch up to 55 alphanumeric characters Switch config switch info system location sys_location sys_location Enter a brief description up to 55 alphanumeric characters of the Managed Switch location Like t...

Страница 62: ...ify the secondary system log server IP IPv6 address Switch config syslog server3 A B C D A B C D E F G H A B C D A B C D E F G H Specify the third system log server IP IPv6 address No command Switch c...

Страница 63: ...ormation and load factory settings ro read only Read Only access privilege Switch config user NAME password password password Enter the password up to 20 alphanumeric characters for this user account...

Страница 64: ...F G H Specify the primary RADIUS server IP IPv6 address Switch config user radius server2 A B C D A B C D E F G H A B C D A B C D E F G H Specify the secondary RADIUS server IP IPv6 address No command...

Страница 65: ...port VLAN settings from one VLAN to another This allows VLAN to accommodate network moves changes and additions with the greatest flexibility 802 1Q VLAN Concept Port Based VLAN is simple to implemen...

Страница 66: ...note at this point that any network host connected to an Access Port is totally unaware of the VLAN assigned to the port The network host simply assumes it is part of a single broadcast domain just a...

Страница 67: ...nk vlan 1 4094 1 4094 Specify the selected ports Trunk VLAN ID VID Switch config if PORT PORT vlan dot1q vlan mode access Set the selected ports to access mode untagged Switch config if PORT PORT vlan...

Страница 68: ...packets will be limited to within the VLAN Port Based VLAN is uncomplicated and fairly rigid in implementation and is useful for network administrators who wish to quickly and easily set up VLAN so a...

Страница 69: ...trunk VLAN table Switch config vlan ID show Show the membership status of this VLAN ID Switch config show vlan interface Show all ports VLAN assignment and VLAN mode Switch config show vlan interface...

Страница 70: ...dot1q vlan mode trunk native Set the selected ports to Trunk native Mode tagged and untagged Switch config if 1 4 exit Exit current ports interface mode Switch config interface 45 46 Enter port 45 to...

Страница 71: ...interface numbers Command Parameter Description Switch config interface port_list port_list Enter several port numbers separated by commas or a range of port numbers For example 1 3 or 2 4 Note You n...

Страница 72: ...PORT PORT channel group trunking Disable port trunking 4 Set up port description Command Parameter Description Switch config if PORT PORT description description description Type in the description f...

Страница 73: ...port s Switch config if PORT PORT no ip dhcp snooping server trust Unconfigure port s as DHCP server trust port s Setup IGMP snooping MLD sub commands Command Parameter Description Switch config if P...

Страница 74: ...P sourceguard setting to default unlimited 8 Enable loop detection per port Command Parameter Description Switch config if PORT PORT loop detection Enable loop detection on port s No command Switch co...

Страница 75: ...000Mbps No command Switch config if PORT PORT no qos rate limit ingress Undo ingress rate limit Switch config if PORT PORT no qos rate limit egress Undo egress rate limit 12 Shutdown interface Command...

Страница 76: ...fig if PORT PORT no spanning tree p2p Undo specify the port as point to point port 14 Set up port speed Command Parameter Description Switch config if PORT PORT speed 1000 100 10 1000 100 10 Set port...

Страница 77: ...ce statistics is useful for network administrators to diagnose and analyze port traffic real time conditions Command Parameters Description Switch config show interface Show overall interface configur...

Страница 78: ...d ports 2 6 26 Show sfp Command When you slide in SFP transceiver detailed information about this module can be viewed by issuing this command Command Description Switch config show sfp information Di...

Страница 79: ...ory resources required for the complete network management SNMP Manager is often composed by desktop computer work station and software program such like HP OpenView Totally 4 types of operations are...

Страница 80: ...e the RS 232 RJ 45 console port or one of the 10 100 1000Base TX RJ 45 ports as the temporary RJ 45 Management console port to set up the assigned IP parameters of the Managed Switch including IP addr...

Страница 81: ...for network management applications 4 Switch Management Set up switch port configuration VLAN configuration and other functions 5 Switch Monitor View the operation status and traffic statistics of th...

Страница 82: ...me command to edit this field System Location Display a brief location description for this Managed Switch Use switch info sys location sys location command to edit this field DHCP DHCPv6 Vendor ID En...

Страница 83: ...egistered users are allowed to operate the Managed Switch Users who want to operate the Managed Switch need to register into the user list first To view or change current registered users select User...

Страница 84: ...n for double checking Description Enter a unique description up to 35 alphanumeric characters for the user This is mainly for reference only Console Level Select the desired privilege for the console...

Страница 85: ...roduct Secret Key The word to encrypt data of being sent to RADIUS server RADIUS Port The RADIUS service port on RADIUS server Retry Time Times of trying to reconnect if the RADISU server is not reach...

Страница 86: ...View the registered SNMP community name list Add a new community name or remove an existing community name 6 Trap Destination View the registered SNMP trap destination list Add a new trap destination...

Страница 87: ...Managed Switch You can use the default IP address or specify a new one when the situation of address duplication occurs or the address does not match up with your network The default factory setting...

Страница 88: ...ix FE80 it will use the prefix supplied by the router and put it together with its identifier which by default is the MAC address in EUI 64 format IPv6 Gateway Specify the IP address of a gateway or a...

Страница 89: ...rts auto provisioning function that enables DHCP clients to automatically download the latest Firmware and configuration image from the server For information about how to set up a DHCP server please...

Страница 90: ...anagement service 4 3 3 RS232 Telnet Console Configuration Click the option RS232 Telnet Console Configuration from the Network Management menu and then the following screen page appears Baud Rate 960...

Страница 91: ...reen page appears Time Synchronization To enable or disable time synchronization Time Server IP IPv6 Address NTP time server address 2nd Time Server IP IPv6 Address When the default time server is dow...

Страница 92: ...ast not too far away In this way the time will be more accurate 4 3 5 Device Community Click the option Device Community from the Network Management menu and then the following screen page appears Up...

Страница 93: ...e only SNMP Level Click the pull down menu to select the desired privilege for the SNMP operation NOTE When the community browses the Managed Switch without proper access right the Managed Switch will...

Страница 94: ...ntication failure trap after any unauthorized users attempt to login Port Link Up Down Trap Enable or disable the Managed Switch to send port link up link down trap Fan Trap Enable or disable the Mana...

Страница 95: ...62 Specify the second Log server IP IPv6 address When the default Log Server is down the Managed Switch will automatically contact the second or third Log server Log Server IPv63 Specify the third Log...

Страница 96: ...nfiguration 8 QoS Configuration Set up the priority queuing rate limit and storm control 9 IGMP MLD Snooping Configuring IGMP MLD Snooping parameters 10 Static Multicast Configuration To create edit o...

Страница 97: ...0180C2000000 to 0180C200000F will be dropped Multicast MAC addresses from 0180C2000000 to 0180C200000F are reserved for use by 802 1 802 3 protocols The purpose for each multicast address is describe...

Страница 98: ...e data than any one single port or device can deliver without replacing everything and buying new hardware For most backbone installations it is common to install more cabling or fiber optic pairs tha...

Страница 99: ...t Trunking Create edit or delete port trunking group s 3 LACP Port Configuration Set up the configuration of LACP on all or some ports 4 4 3 1 Distribution Rule Click the option Distribution Rule from...

Страница 100: ...ion MAC Address Enable or disable packets according to Destination MAC address 4 4 3 2 Port Trunking Click the option Port Trunking from the Link Aggregation menu and then the following screen page ap...

Страница 101: ...below in mind when assign ports to a trunking group Must have 2 to 16 ports in each trunking group Each port can only be grouped in one group If the port is already set On in LACP Port Configuration i...

Страница 102: ...configured as part of a static trunk If ports on other devices are also configured as LACP the Managed Switch and the other devices will negotiate a trunk link between them If an LACP trunk consists o...

Страница 103: ...ave the same LACP port Key In order to allow a port to join an aggregated group the port Key must be set to the same value The range of key value is between 0 and 255 When key value is set to 0 the po...

Страница 104: ...disables the links which are not part of that tree leaving a single active path between any two network nodes Multiple active paths between network nodes cause a bridge loop Bridge loops create sever...

Страница 105: ...Settings Set up system priority max Age hello time etc 2 RSTP Aggregated Port Settings Set up aggregation path cost priority edge etc 3 RSTP Physical Port Settings Set up physical ability and edge sta...

Страница 106: ...ork Force Version Set and show the RSTP protocol to be used Normal use RSTP Compatible compatible with STP 4 4 4 2 RSTP Aggregated Port Settings Click the option RSTP Aggregated Port Settings from the...

Страница 107: ...us were true If the port cannot maintain this status for example if the port is forced to half duplex operation the P2P status changes to operate as if the P2P value were false The default setting for...

Страница 108: ...108 This sets up each port s path cost The default value is 0...

Страница 109: ...pull down menu of Select Setting You can choose Port Priority value between 0 and 240 The default value is 0 Configure Port Edge Select Edge from the pull down menu of Select Setting Set the port to e...

Страница 110: ...connecting to a VLAN clients that are 802 1X complaint should successfully authenticate with the authentication server Initially ports are in the authorized state which means that ingress and egress...

Страница 111: ...dentifying information from the client verifies that information with the authentication server and relays the response to the client RADIUS IP Specify RADIUS Authentication server address RADIUS Secr...

Страница 112: ...ed This forces the Managed Switch to deny access to all clients either 802 1X aware or 802 1X unaware Auto This requires 802 1X aware clients to be authorized by the authentication server Accesses fro...

Страница 113: ...folder MAC Address Management from the Switch Management menu and then the following screen page appears 1 MAC Table Learning To enable or disable learning MAC address function 2 Static MAC Table Conf...

Страница 114: ...then the following screen page appears NOTE The Managed Switch only supports switch based MAC security and does not support port based MAC security The Managed Switch can support up to 128 entries of...

Страница 115: ...different broadcast domains All broadcast multicast and unknown packets entering the Switch on a particular VLAN will only be forwarded to the stations or ports that are members of that VLAN VLAN can...

Страница 116: ...t of broadcast packets on their network The following screen page appears when you choose Port Based VLAN mode and then select Configure VLAN Since source addresses of the packets are listed in MAC ad...

Страница 117: ...N VLAN can enhance performance by conserving bandwidth and improve security by limiting traffic to specific domains A VLAN is a collection of end nodes grouped by logics instead of physical locations...

Страница 118: ...derstand Access VLAN specifies the VLAN ID to the switch port that will assign the VLAN ID to untagged traffic from that port A port can only be assigned to one Access VLAN at a time When the port is...

Страница 119: ...s referred to as the native VLAN ID for a Trunk native Port The native VLAN ID is the VLAN ID that carries untagged traffic on trunk native ports Example PortX configuration Configuration Result Trunk...

Страница 120: ...G TCI P C VID Type LEN PAYLOAD FCS 802 1q Frame Preamble SFD D A S A Outer Tag or SP Tag Inner Tag or C Tag TCI P C VID Type LEN PAYLOAD FCS Double tagged Frame Double Tagged Frame As shown below in Q...

Страница 121: ...set up VLAN mode and create 802 1Q VLAN on the selected port s 3 Management VLAN To set up management VLAN and management ports 4 4 7 4 1 VLAN Interface The following screen page appears if you choos...

Страница 122: ...s Untagged packets PVID is added Tagged packets Stay intact When sending packets PVID and VID will be compared If PVID and VID are the same PVID will be removed If PVID and VID are different the packe...

Страница 123: ...N group VLAN Name Use the default name or specify a VLAN name VLAN Members If you check the ports it denotes that the ports selected belong to the specified VLAN group 4 4 7 4 3 Management VLAN The fo...

Страница 124: ...elect the VLAN mode for this Management VLAN Management Port Tick the checkbox on the ports that you would like them to become Management ports 4 4 7 4 4 QinQ VLAN configuration The following screen p...

Страница 125: ...ed criteria and receives preferential treatments QoS enables you to assign various grades of network service to different types of traffic such as multi media video protocol specific time critical and...

Страница 126: ...at services to the egress queues are offered in the sequential order and all traffic with higher priority queues is transmitted first before lower priority queues are serviced Weight Weighted Round Ro...

Страница 127: ...packets Specify one of the listed options for CoS Class of Service priority tag values The default value is 0 The default 802 1p settings are shown in the following table Priority Level normal low lo...

Страница 128: ...default setting is disabled Configure DSCP Remark Check DSCP Remarking to enable This allows you to enable or disable DSCP remarking for each port The default setting is disabled 4 4 8 2 QoS Rate Limi...

Страница 129: ...s traffic will be dropped Specifying 0 is to disable this function 4 4 9 IGMP MLD Snooping The Internet Group Management Protocol IGMP is a communications protocol used to manage the membership of Int...

Страница 130: ...the packet processing at the switch at the cost of needing additional memory to handle the multicast tables and also decreases the workload at the end hosts since their network cards or operating syst...

Страница 131: ...1 One Unit 1 second Query Response Interval This determines the maximum amount of time allowed before sending an IGMP response report Default value 3000 One Unit 0 1 second Immediate Leave The Immedia...

Страница 132: ...om the IGMP MLD Snooping menu and then the following screen page with the ability information of IPMC Segment ID Name and IP Range appears ID View only field that shows the current registered ID numbe...

Страница 133: ...haracters IP Range Specify the multicast streams IP range for the registered segment The IP range is from 224 0 1 0 239 255 255 255 4 4 9 4 IPMC Profile Select the option IPMC Profile from the IGMP ML...

Страница 134: ...PMC Profiles that are registered Max This shows the maximum number available for IPMC Profile The maximum number is 60 Profile Name Enter an identification name This field is limited to 20 characters...

Страница 135: ...gistered in IPMC Profile option 4 4 10 Static Multicast Configuration Select the option Static Multicast Configuration from the Switch Management menu and then the following screen page appears IP IPv...

Страница 136: ...tatic multicast configuration The default maximum number is 128 IP IPv6 Address Specify the multicast stream source IP IPv6 address VLAN Specify a VLAN ID for multicast stream Forwarding port Select a...

Страница 137: ...onnected to the network For example it could be a device that you trust but has been taken over by an attacker By default most security functions available in this Managed Switch are turned off to pre...

Страница 138: ...rm 4 4 12 1 DHCP Option 82 DHCPv6 Option 37 Settings The Managed Switch can add information about the source of client DHCP requests that relay to DHCP server by adding Relay Agent Information This he...

Страница 139: ...ver Servers recognizing the Relay Agent Information option may use the Information to implement IP address or other parameter assignment policies Switch or Router as the DHCP relay agent intercepting...

Страница 140: ...CP request is from Port 1 that is marked as both Opt82 port and trust port A If a DHCP request is with Opt82 Agent information and then the Managed Switch will forward it B If a DHCP request is withou...

Страница 141: ...ings from the Security Configuration menu and then the following screen page appears Source Guard To specify authorized access information for each port There are three options available Unlimited Non...

Страница 142: ...ed Time Specify packets expired time 180 259200 Seconds DHCP Server Trust Port Specify designated port to be Trust Port that can give you offer from DHCP server Check any port box to enable it DHCP Se...

Страница 143: ...port number Click New to register a new Static IP address and then the following screen page appears Click Edit to edit and view Static IP Table settings Use Delete to remove a current Static IP addre...

Страница 144: ...out to DHCP Server soon after they receive a DHCP offer When DCHP Server responds with a DHCP ACK message that contains lease duration and other configuration information the IP configuration process...

Страница 145: ...orm control Unknown Unicast Rate Enable or disable unknown Unicast traffic control and set up unknown Unicast Rate packet per second pps Multicast Rate Enable or disable Multicast traffic control and...

Страница 146: ...ination MAC Filter Select Any or specify a destination MAC address TOS Traffic Class Filter Select Any or specify a TOS Traffic class Protocol Next Header Specify IPv4 protocol and IPv6 next header IP...

Страница 147: ...running different network layer protocols can learn information about each other A set of attributes are used to discover neighbor devices These attributes contains type length and value descriptions...

Страница 148: ...LLDP TLVs to send LLDP uses a set of attributes to discover neighbor devices These attributes contains type length and value descriptions and are referred to TLVs Details such as port description sys...

Страница 149: ...interval is 1440 minutes VLAN ID Specify the VLANs where Loop Detection will be performed Port 1 48 Enable or disabled Loop Detection function on the specific port s 4 5 Switch Monitor Switch Monitor...

Страница 150: ...only field that shows IGMP status and Groups table 9 SFP Information View the current port s SFP information e g speed Vendor ID Vendor S N etc SFP port state shows current DMI Diagnostic monitoring...

Страница 151: ...ate in frame relay Frame relay is temporarily disabled in order to prevent temporary loops which may occur in a Bridged LAN during the lifetime of this state as the active topology of the Bridged LAN...

Страница 152: ...port Frames Sent The total frames sent from current port Sent Utilization The ratio of real sent traffic to the total bandwidth of current ports Total Bytes Total bytes of receiving and sending from c...

Страница 153: ...llision Each port s Collision frames TX Dropped Frames Drop frames sent Total Errors Total error frames received Clear All This will clear all port s counter values and be set back to zero 4 5 4 Port...

Страница 154: ...bytes frames received Frames 1024 1518 Bytes 1024 1518 bytes frames received Frames 1519 MAX Bytes Over 1519 bytes frames received RX Multicast Frames Good multicast frames received TX Multicast Fram...

Страница 155: ...ct LACP Port Status from the LACP monitor menu and then the following screen page appears In this page you can find the following information about LACP port status Port Number The number of the port...

Страница 156: ...key based on its rate duplex mode and other basic configurations In an LACP aggregation group all ports share the same operational key in a manual or static LACP aggregation the selected ports share t...

Страница 157: ...u and then the following screen page appears In this page you can find the following information about RSTP bridge Update Update the current status Bridge ID RSTP Bridge ID of the Managed Switch Max A...

Страница 158: ...e Port Yes is displayed if the port is the Edge port connecting to an end station and does not receive BPDU P2p Port Yes is displayed if the port link is connected to another STP device Protocol Displ...

Страница 159: ...cation packets from current port RSTP Received The total received RSTP packets from current port STP Received The total received STP packets from current port TCN Received The total received TCN packe...

Страница 160: ...2 1X port status from the 802 1x Monitor menu and then the following screen page appears In this page you can find the following information about 802 1X ports Port The number of the port State Displa...

Страница 161: ...n order to view the real time 802 1X port statistics status of the Managed Switch select 802 1x Statistics from the 802 1x Monitor menu and then the following screen page shows up 4 5 8 IGMP MLD Monit...

Страница 162: ...group members exist on the subnet Upon receiving an IGMP general query the Managed Switch forwards it through all ports in the VLAN except the receiving port Querier The state of IGMP querier in the...

Страница 163: ...h as VLAN ID Querier and Queries Transmitted Received packets Select MLD Snooping Status from the IGMP MLD Monitor menu and then the following screen page appears Update Click Update to update the tab...

Страница 164: ...oup The multicast IP address of IGMP querier Port The port s grouped in the specific multicast group 4 5 9 SFP Information Click the SFP Information folder and then the following screen page appears 4...

Страница 165: ...of the slide in SFP Transceiver Vendor Name Vendor name of the slide in SFP Transceiver Vendor PN Vendor PN of the slide in SFP Transceiver Vendor SN Vendor SN of the slide in SFP Transceiver 4 5 9 2...

Страница 166: ...voltage TX Bias mA The Slide in SFP module operation current TX Power dbm The Slide in SFP module optical Transmission power RX Power dbm The Slide in SFP module optical Receiver power 4 5 10 DCHP Sno...

Страница 167: ...iew only field that shows DHCP server IP address TimeLeft View only field that shows DHCP client lease time 4 5 11 MAC Address Table MAC Address Table displays MAC addresses learned when System Reset...

Страница 168: ...f the neighboring device System Name View only field that shows the system name advertised by the neighboring device Port Description View only field that shows the port description of the remote port...

Страница 169: ...ct IEEE 802 1q Tag VLAN Table from the Switch Monitor menu and then the following screen page appears VLAN Name View only filed that shows the VLAN name VID View only filed that shows the VID 4 6 Syst...

Страница 170: ...to update the latest firmware save current configuration or restore previous configuration to the Managed Switch 4 Load Factory Setting Load Factory Setting will set the configuration of the Managed...

Страница 171: ...information Select Event Log from the System Utility menu and then the following screen page appears Click Clear to clear all Event log records 4 6 3 Upgrade The Managed Switch has both built in TFTP...

Страница 172: ...ecific path and filename within the File Server Click OK to start the download process and receive files from the server A transmitting progress will be displayed during file transfer Once completed a...

Страница 173: ...ation will set all the configurations of the Managed Switch back to the factory default settings However IP and Gateway addresses will not restore to the factory default It is very useful when network...

Страница 174: ...r any configuration change Reset System can make it effective Select Reset System from the Console main menu and then the following screen page appears Click Set Next bootup Image to change the boot u...

Страница 175: ...he directory raddb and modify these three files users clients conf and dictionary which are on the disc shipped with this product Please use any text editing software e g Notepad to carry out the foll...

Страница 176: ...visioning process are described below for your reference A Setup Procedures Follow the steps below to set up Auto Provisioning server modify dhcpd conf file and generate a copy of configuration file S...

Страница 177: ...n Server Update DHCP Client Linux Fedora 12 supports yum function by default First of all update DHCP client function by issuing yum install dhclient command Install DHCP Server Issue yum install dhcp...

Страница 178: ...ease note that each vendor has their own way to define auto provisioning Make sure to use the file provided by the vendor Enable and run DHCP service 1 Choose dhcpd 2 Enable DHCP service 3 Start runni...

Страница 179: ...179 Step 3 Modify dhcpd conf file Open dhcpd conf file in etc dhcp directory Double click dhcpd conf placed in etc dhcp directory to open it...

Страница 180: ...oes not request a specific IP lease time the server will assign a default lease time value Maximum lease time This is the maximum length of time that the server will lease for 2 Define subnet subnet m...

Страница 181: ...MD5 for firmware image 13 Specify the configuration filename 14 Specify the MD5 for configuration file NOTE 1 The text beginning with a pound sign will be ignored by the DHCP server For example in th...

Страница 182: ...182 Restart DHCP service...

Страница 183: ...be equal to DHCP when provisioning and it results in MD5 never matching and causing the device to reboot endless In order for your Managed Switch to retrieve the correct configuration image in TFTP FT...

Страница 184: ...ration 2 The device will compare the firmware and configuration MD5 code form of DHCP option every time when it communicates with DHCP server 3 If MD5 code is different the device will then upgrade th...

Страница 185: ...y The Managed Switch supports Port based VLAN implementation and IEEE 802 1Q standard tagging mechanism that enables the switch to differentiate frames based on a 12 bit VLAN ID VID field Besides the...

Страница 186: ...PCs or other workstations Switch 1 also connects to Port 1 in Managed Switch Client PCs in the Marketing Department can access the Server 1 and Public Server Switch 2 is used in the RD Department to...

Страница 187: ...port based RD OK 7 Return to Global Configuration mode and show currently configured port based VLAN membership SWH config if 2 22 23 26 exit SWH config show vlan port based Port Based VLAN Index VLAN...

Страница 188: ...VLAN Configure VLAN Click OK to apply the settings 4 Click New to add a new Port Based VLAN Switch Management VLAN Configuration Port Based VLAN Configure VLAN 5 Add Port 2 22 23 and 26 in a group and...

Страница 189: ...to member port 21 23 and 26 2 A untagged packet arrives at Port 2 Untagged packets received on the Managed Switch will be forwarded out untagged Therefore in this example the Managed Switch will look...

Страница 190: ...packets to the Managed Switch to be routed in Carrier Ethernet For this example IEEE 802 1Q tagging mechanism can be used to forward data from the Managed Switch to the destination PC Data VLAN Netwo...

Страница 191: ...n dot1q vlan access vlan 11 OK SWH config if 1 exit 8 Show currently configured VLAN tag settings SWH config show vlan interface IEEE 802 1q Tag VLAN Interface Port Mode PVID VLAN Member 1 access 11 1...

Страница 192: ...By default all ports are member ports of the Default_VLAN Before removing the Deafult_VLAN from the VLAN table make sure you have correct management VLAN and PVID configurations otherwise incorrect co...

Страница 193: ...t arrives at Port 1 port 1 s Port VLAN ID 11 will be added to the original port Because port 26 is set as a trunk port it will forward the packet with tag 11 out to the Carrier Ethernet 2 A tagged pac...

Страница 194: ...WH config vlan 10 3 Name VLAN 10 to Management SWH config vlan 10 name Management OK SWH config vlan 10 exit 4 Assign Port 26 to VLAN 10 SWH config interface 26 SWH config if 26 vlan dot1q vlan trunk...

Страница 195: ...gement VLAN 10 that includes only Port 26 as a member port Switch Management VLAN Configuration IEEE 802 1q Tag VLAN Configure VLAN 3 Check Management VLAN 10 settings Switch Management VLAN Configura...

Страница 196: ...ag VLAN Management VLAN Click OK to apply the settings 5 Check Management VLAN 10 settings again Switch Management VLAN Configuration IEEE 802 1q Tag VLAN Configure VLAN Now Port 26 and CPU are member...

Страница 197: ...nfiguration mode SWH enable Password SWH config SWH config 2 Create a VLAN 15 SWH config vlan dot1q vlan 15 OK 3 Name VLAN 15 to S VLAN SWH config vlan 15 name S VLAN OK SWH config vlan 15 exit 4 Assi...

Страница 198: ...EEE 802 1q Tag VLAN Interface Port Mode PVID VLAN Member 1 dot1q tunnel 15 1 15 2 access 1 1 3 access 1 1 4 access 1 1 5 access 1 1 6 access 1 1 7 access 1 1 8 access 1 1 9 access 1 1 10 access 1 1 11...

Страница 199: ...By default all ports are member ports of the Default_VLAN Before removing the Deafult_VLAN from the VLAN table make sure you have correct management VLAN and PVID configurations otherwise incorrect c...

Страница 200: ...original tag will be kept intact and then added an outer tag 15 by Port 1 which is set as a tunnel port When this packet is forwarded to Port 26 two tags will be forwarded out because Port 26 is set a...

Страница 201: ...0 Add and revise WEB management section Revise VLAN section on WEB GUI Draft new CISCO LIKE CLI section 1 07 B0 1 07 A2 1 07 92 2011 05 2011 04 2011 01 0 95 Modify LOGO image and product description...

Результаты поиска

Содержание FOS-3148 Series

Отзывы:

Похожие инструкции для FOS-3148 Series

Бренды по названию

Популярные бренды

CTS FOS-3148 Series, Руководство пользователя

Результаты поиска

Содержание FOS-3148 Series

Отзывы:

Похожие инструкции для FOS-3148 Series

Бренды по названию

Популярные бренды